EP 3830729 B1 20230510 - BOOT FIRMWARE SANDBOXING
Title (en)
BOOT FIRMWARE SANDBOXING
Title (de)
BOOT-FIRMWARE SANDBOXING
Title (fr)
MISE EN BAC À SABLE DU FIRMWARE DE DÉMARRAGE
Publication
Application
Priority
- US 201862739103 P 20180928
- US 201916428757 A 20190531
- US 2019051233 W 20190916
Abstract (en)
[origin: US2020104506A1] Techniques are disclosed relating to securely booting a computer system. In some embodiments, a bootloader initiates a boot sequence to load an operating system of the computing device and detects firmware of a peripheral device to be executed during the boot process to initialize the peripheral device for use by the computing device. In response to the detecting, the bootloader instantiates a sandbox that isolates the firmware from the bootloader. In various embodiments, the firmware is loaded from an option read-only memory (OROM) included the peripheral device and executed during the boot sequence to initialize the peripheral device. In some embodiments, the bootloader assigns one or more memory address ranges to the firmware, and the sandbox restricts the firmware from accessing memory addresses that are not included in the assigned one or more address ranges.
IPC 8 full level
G06F 21/53 (2013.01); G06F 9/4401 (2018.01); G06F 12/14 (2006.01); G06F 13/28 (2006.01); G06F 21/57 (2013.01)
CPC (source: EP US)
G06F 9/4406 (2013.01 - EP); G06F 9/4411 (2013.01 - EP); G06F 12/1441 (2013.01 - EP); G06F 13/28 (2013.01 - EP US); G06F 21/53 (2013.01 - EP US); G06F 21/572 (2013.01 - US); G06F 21/575 (2013.01 - EP US)
Designated contracting state (EPC)
AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR
DOCDB simple family (publication)
US 11238160 B2 20220201; US 2020104506 A1 20200402; CN 112740211 A 20210430; EP 3830729 A1 20210609; EP 3830729 B1 20230510; WO 2020068465 A1 20200402
DOCDB simple family (application)
US 201916428757 A 20190531; CN 201980061975 A 20190916; EP 19780055 A 20190916; US 2019051233 W 20190916